Purpose of GDPR policy

This purpose of this policy is to clearly state how ‘we’ as a business will comply with GDPR regulations to collect, process and store data. We only collect a customers address after payment to ensure we are not collecting unnessecary details. Any addresses written on paper files are locked and stored for 1 year after the customers last order before being destroyed. Digital records containing addresses are stored on the business Google Drive with password encryption. Customer files are removed from the digital database 1 year after the customers last order. The only details we take from customers are their names and addresses. We only take a customers address when we need to send an order to them and will use their address for this purpose ONLY.

How we collect data

The only details we take from customers are their names and addresses. We only take a customers address when we need to send an order to them and will use their address for this purpose ONLY. We will collect a customers name when they have placed an order. We will then use this to keep track of customer orders. We will not use our customers names for any other purpose than fulfilling their order.

How we use data

We use customer names to fulfil their orders and use their addresses to post their products to them. We would NOT write down or log in our files any names of customers until they have officially placed an order to avoid collecting unnessecary data.

How we disclose data

Data will only be disclosed amongst staff when it is necessary to fulfil an order.

How we store data

Paper documents containing customer names and addresses are locked in a filing cabinet whenever the building is vacant. Digital documents are stored on the business Google Drive with password encryption. Data will only be shared amongst staff when is is necessary to fulfil a customer order.

Our customers rights

Our customers have the right to request that their data is removed from our database at any time and we are required to do this immediately. In this instance, all information relating to the customer will be destroyed.

Changes of privacy policy

We reserve the right to make changes to this policy at any time and details of all policy changes will be made available on our website.